telnyx-email-suppressions-curl

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard CLI tools including curl for network requests, jq for JSON processing, and mktemp and rm for secure temporary file management. These tools are employed to handle API responses and perform error checking.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with https://api.telnyx.com/v2 to perform email suppression management tasks. This domain belongs to the primary vendor and is the intended endpoint for the skill's functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from API responses and CSV files. It explicitly instructs the agent to percent-encode recipient email addresses and other variables when constructing URLs to mitigate potential injection vulnerabilities.
  • [DATA_EXPOSURE]: The skill handles sensitive data by exporting suppression lists to local CSV files and importing data from user-provided files. The use of temporary files with restricted scope and automated cleanup via shell scripts follows secure data handling practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 06:27 PM
Security Audit — agent-trust-hub — telnyx-email-suppressions-curl